GNOME Bugzilla – Bug 706775
openvpn plugin doesn't support 'keysize' option => not able to connect
Last modified: 2013-09-11 07:07:04 UTC
Created attachment 253083 [details] This one works with openpvn --config from cli I have tried to import the attached config file for openvpn with nm-applet, but the saved config ends up broken. Following is the broken config from nm-applet and I attached the working config. [connection] id=proxpn uuid=df43e0e5-31b1-4b7b-9a4a-846ce47b11df type=vpn [vpn] service-type=org.freedesktop.NetworkManager.openvpn connection-type=password-tls password-flags=3 remote=miami.proxpn.com cipher=BF-CBC #missing keysize 512 line after this line proto-tcp=yes comp-lzo=yes reneg-seconds=0 cert-pass-flags=0 port=443 tunnel-mtu=1500 mssfix=yes username=warrensg2001@gmail.com cert=/home/steve/Documents/MacOSX/config/ssl/client.crt ca=/home/steve/Documents/MacOSX/config/ssl/ca.crt key=/home/steve/Documents/MacOSX/config/ssl/client.key # missing verb 4 line # missing mute 5 line [ipv4] method=auto The missing lines keep me from connecting to my vpn service with openpvn. While the offer pptp connections I would rather use the more secure openpvn connections. Please fix.
Created attachment 253084 [details] Broken config from nm-applet
The 'verb' and 'mute' options are just used for logging. The option that probably breaks the connectivity is the 'keysize' option, setting non-default key size for Blowfish cipher key. Even if changing key sizes is not recommended, we should support it not to fail for servers that changes the size. I've written a patch to support '--keysize' option in NM plugin. NM devels, please review it in jklimes/bgo706775-keysize. https://git.gnome.org/browse/network-manager-openvpn/log/?h=jklimes/bgo706775-keysize
The patches look good to me
Looks good to me too.
Applied to master: 3d10af0947ed6eb02d9812b120a33508d68c7b86